Report - diyiapp.cm/

Report Overview

Visited public
2023-11-01 05:37:05
Tags
scam lottery
URL
diyiapp.cm/
Finishing URL
5222co.com/register?id=63494009
IP / ASN
143.92.58.241
#64050 BGPNET Global ASN
Title
101彩票 - 用户注册
Scam - Fake Lottery

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
diyiapp.cm	unknown	unknown	No data	No data	383 B	412 B	143.92.58.241
ocsp.sectigo.com	487	2018-08-16	2019-11-29 12:50:24	2023-10-31 13:44:23	330 B	964 B	172.64.149.23
5222co.com	unknown	2023-09-15	2023-09-27 14:21:23	2023-10-18 22:20:07	17 kB	2.4 MB	20.239.95.19
aeis.alicdn.com	23225	2008-06-25	2016-08-25 13:57:46	2023-10-31 18:12:16	1.3 kB	309 kB	104.110.21.4
ocsp2.globalsign.com	1544	1999-04-19	2012-05-23 20:10:04	2023-10-31 05:17:05	357 B	1.9 kB	104.18.21.226
ynuf.aliapp.org	8486	2008-01-04	2017-01-30 08:25:30	2023-10-31 15:34:19	924 B	2.0 kB	203.119.169.158
cf.aliyun.com	37110	2007-09-28	2015-11-12 17:39:08	2023-10-31 18:34:02	623 B	277 B	59.82.133.163

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (22)

	URL	From	Size	First Seen	Last Seen
	5222co.com/register?id=63494009	ScriptElement	1.3 kB	2023-04-11	2024-08-21
Pretty URL 5222co.com/register?id=63494009 IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-04-11 06:15 Last Seen2024-08-21 09:35 Times Seen441 Hash 2ca4be249a705779f561fc4e10db4ebe 169e7fed0746ec659c205fd30e830302954b6890 9c7b8f45da0e7a4920deba90ec9fb470a8127e7f7431935de1c63202b1ea96cc Loading...

	5222co.com/static/spine-webgl.js	ScriptElement	369 kB	2023-03-08	2024-08-21
Pretty URL 5222co.com/static/spine-webgl.js IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 11:56 Last Seen2024-08-21 09:35 Times Seen432 Hash 5200130e3b8970af6c19b8587f46663b 56f9307ce28cb0a1c0150d92b095760936e83618 ffafc28590239f5f3f134c8bc83753f6c2e5d4ff2d3c775c2ff50afc2a608c13 Loading...

	5222co.com/static/public/layer.m.js	ScriptElement	3.1 kB	2023-03-08	2024-08-21
Pretty URL 5222co.com/static/public/layer.m.js IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 11:56 Last Seen2024-08-21 09:35 Times Seen433 Hash dda7a6368de9444d877be068fab49b44 a03085133806ceaac8a3e64711616582d000e45f 8cb834cdc0c8fc17c42aefb5e79fd0ec76a3b856531b801ddd1698cf7a9c7864 Loading...

	unknown	Function	54 B	2023-04-12	2025-05-09
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-12 08:25 Last Seen2025-05-09 02:24 Times Seen5131 Hash fcaea4b8885ca5c1fb3ddd5c490da5c6 35745f87b37210d992a9ed534a593ae500b7adaa 934c2008743c36db746a9d6ebd9f1b84ff11477edc55fbf7b599bbfa687f7272 Loading...

	5222co.com/static/js/10.da526d8951ec3b4b51e4.js	ScriptElement	21 kB	2023-10-31	2024-08-20
Pretty URL 5222co.com/static/js/10.da526d8951ec3b4b51e4.js IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-31 08:42 Last Seen2024-08-20 21:40 Times Seen34 Hash c93bc71ccc62acd467b12a10822ae8c0 e6f6741c1c8985f2ee9b6fdea26c914f32da2863 c69d769aa2521500f7c9c4589c752326a549440ba4be4650b09cede9b8f7d7e7 Loading...

	5222co.com/static/js/21.89ac0bd35be932dfed91.js	ScriptElement	59 kB	2023-10-31	2024-08-20
Pretty URL 5222co.com/static/js/21.89ac0bd35be932dfed91.js IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-31 08:42 Last Seen2024-08-20 21:40 Times Seen23 Hash 0d4830ab9e9fa07e383fd4acfce88eae 1432903577a61fea878e2fafb5c95477de06c261 e2604bd72827fcbf72d6f19eb20e471091db9029485ae2d61892992fa335edc2 Loading...

	aeis.alicdn.com/AWSC/WebUMID/1.93.0/um.js	ScriptElement	178 kB	2023-03-13	2025-05-09
Pretty URL aeis.alicdn.com/AWSC/WebUMID/1.93.0/um.js IP 104.110.21.4 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-13 19:52 Last Seen2025-05-09 10:32 Times Seen11435 Hash a4cff78229e56fde5f28d1999679a1d1 8d8f89aa7d26569337192dce8a12daaa1867bcd4 4c4701ca975df0019b9ce5ffd2a8d33f413bad55663a9f64ba9369da7a444db0 Loading...

	5222co.com/register?id=63494009	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL 5222co.com/register?id=63494009 IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 10:42 Times Seen4635410 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	ynuf.aliapp.org/w/wu.json	ScriptElement	156 B	2024-08-20	2024-08-20
Pretty URL ynuf.aliapp.org/w/wu.json IP 203.119.169.158 ASN #37963 Hangzhou Alibaba Advertising Co.,Ltd. Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 21:33 Last Seen2024-08-20 21:33 Times Seen1 Hash 5b90de0cf99d673577f027b59e8d54a0 313d624468ef1ef2c0879e6d511ab861d057e929 3e3d0eb268a641d98893433c58c14bbc5a3fa05f482862d724aac08144463082 Loading...

	5222co.com/static/js/yidun/index.js	ScriptElement	11 kB	2023-04-11	2025-04-16
Pretty URL 5222co.com/static/js/yidun/index.js IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-04-11 06:15 Last Seen2025-04-16 00:49 Times Seen556 Hash 06846502dac18669cd7694da925979fe 4fab06af8d6e10cb88c605d83f061464d79d7cf1 5139d2190d1356e640cd47ef1e669e3428a742a939ad4f6ff12e988d6aa9159a Loading...

	5222co.com/static/js/aliyun.min.js	ScriptElement	220 kB	2023-03-08	2024-08-21
Pretty URL 5222co.com/static/js/aliyun.min.js IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 11:56 Last Seen2024-08-21 09:35 Times Seen448 Hash 85e7d42d7ec09184b9bbde78b641ca00 0bc92965c772b460ea1a65468fb2e8baabc7b5d0 5c919aeed13a145644e93be09a3ce46b4e2f241133ac316d61f8c5d2dc59758c Loading...

	5222co.com/static/js/manifest.8eadc6b45795b3a3e588.js	ScriptElement	7.2 kB	2023-11-01	2024-08-20
Pretty URL 5222co.com/static/js/manifest.8eadc6b45795b3a3e588.js IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-01 03:41 Last Seen2024-08-20 21:33 Times Seen13 Hash ccf27683b4967213c946be5dd66b7bdc 9fd468a5a2f46c9ec0629bc8a5dea50aa81e0a26 53b70e1a4aa7bc251b25f6e59e7665e8fa96e4b6870b5685d8eeba67cd769da5 Loading...

	5222co.com/static/js/7.8a722cde59c75e6b4346.js	ScriptElement	314 kB	2023-11-01	2024-08-20
Pretty URL 5222co.com/static/js/7.8a722cde59c75e6b4346.js IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-11-01 04:14 Last Seen2024-08-20 21:33 Times Seen18 Hash 3782552e680d956f42d0976ee83c1c45 bbaebb3b86a1f02e5822069eb10de9178a9807eb c3737672fcb35b94b05c0bf16a41e69807d945e773716ebee284e1e9285e880c Loading...

	aeis.alicdn.com/AWSC/AWSC/awsc.js?_t=235946	ScriptElement	9.7 kB	2023-10-13	2023-11-21
Pretty URL aeis.alicdn.com/AWSC/AWSC/awsc.js?_t=235946 IP 104.110.21.4 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-13 06:39 Last Seen2023-11-21 08:35 Times Seen524 Hash 090957f2f14aae0f5324d4834ae4c59a 5608513afca3653456f3702c0701e55fdb8021ac 296909c63613c50b6c60d8c3ff81ff2c3511d04835ece0c753519a51b9003da0 Loading...

	aeis.alicdn.com/AWSC/uab/1.140.0/collina.js	ScriptElement	249 kB	2023-03-07	2025-05-09
Pretty URL aeis.alicdn.com/AWSC/uab/1.140.0/collina.js IP 104.110.21.4 ASN #16625 AKAMAI-AS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:26 Last Seen2025-05-09 10:32 Times Seen10887 Hash 75fb6b94dcb3a9c89abb59a3ffd7546f 96101820857ef511ba83017e928aeeb88353b162 04975704505b42dc124568d9d4be26aee2d4592826a0487920cb1d016d1a8e58 Loading...

	unknown	Function	66 B	2023-04-12	2025-05-09
Pretty Introduced by Function Embedded in HTML false Observations First Seen2023-04-12 01:32 Last Seen2025-05-09 10:32 Times Seen12072 Hash 8d46e2bc77fb0b41f87ccf9a32df5d25 c22a372d491a29e212169e6db5a44a53369b6935 457e7360a585f828fa0887299245267fd923f6036471a3250665b8b9d3c623af Loading...

	5222co.com/static/js/initws.js	ScriptElement	9.0 kB	2023-03-08	2024-08-21
Pretty URL 5222co.com/static/js/initws.js IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 11:56 Last Seen2024-08-21 09:35 Times Seen435 Hash b75862d5945ee76372a13c6dd89cca98 dc672637184650e0120b5cd079f2dcff574d0343 17863126fed9c414b64b4fa31983f2c7118624d8beaaae8c4c70832ae0fbb4b4 Loading...

	5222co.com/register?id=63494009	ScriptElement	0 B	0001-01-01	2025-05-09
Pretty URL 5222co.com/register?id=63494009 IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen0001-01-01 00:00 Last Seen2025-05-09 10:42 Times Seen4635410 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	5222co.com/static/js/0.25dc413ba0e1ab4cd12b.js	ScriptElement	708 kB	2023-10-31	2024-08-20
Pretty URL 5222co.com/static/js/0.25dc413ba0e1ab4cd12b.js IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML false Observations First Seen2023-10-31 08:42 Last Seen2024-08-20 21:40 Times Seen167 Hash 37833f5bf744761f545cc21b2fade559 9c1daaf148978440321c5b70b75d2953ab5ad842 dfc62199ee6c1bb8222c8fbc1109faccadc5960444f934a35d98275d778a9bcf Loading...

	cf.aliyun.com/nocaptcha/initialize.jsonp?a=FFFF0N0000000000B773&t=FFFF0N0000000000B773%3A1698817014457%3A0.41981164032089036&scene=nc_login&lang=cn&v=v1.2.18&href=https%3A%2F%2F5222co.com%2Fregister&comm={}&callback=initializeJsonp_033761510395864025	ScriptElement	95 B	2024-08-20	2024-08-20
Pretty URL cf.aliyun.com/nocaptcha/initialize.jsonp?a=FFFF0N0000000000B773&t=FFFF0N0000000000B773%3A1698817014457%3A0.41981164032089036&scene=nc_login&lang=cn&v=v1.2.18&href=https%3A%2F%2F5222co.com%2Fregister&comm={}&callback=initializeJsonp_033761510395864025 IP 59.82.133.163 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2024-08-20 21:33 Last Seen2024-08-20 21:33 Times Seen1 Hash eaf2bcf715da77f06ddd632519518206 c41e042308781198b051611e2c53cab2e1f48375 36d0e7bcbb48d7794d5fdcc9f89f18a1233ad9d80b6a14c881b05db9ba32dcf6 Loading...

	5222co.com/register?id=63494009	ScriptElement	57 B	2023-11-01	2024-08-20
Pretty URL 5222co.com/register?id=63494009 IP 20.239.95.19 ASN #8075 MICROSOFT-CORP-MSN-AS-BLOCK Introduced by scriptElement Embedded in HTML true Observations First Seen2023-11-01 04:14 Last Seen2024-08-20 21:33 Times Seen10 Hash d6018fd87dc4ca3f8b5f3ed1aaf5df54 a08193750aa4f36824ce9d6cd8fa1326111c6ec4 76c7471ae0fb58014e83ea8d2d940828ef341830c90879730028f15e458a5a67 Loading...

		Size	First Seen	Last Seen
	#1 Eval - f7fef8930207b23ec9c04386f9a02c76	24 B	2023-03-07 01:02	2025-05-07 22:47
Pretty Observations First Seen2023-03-07 01:02 Last Seen2025-05-07 22:47 Times Seen3568 Hash f7fef8930207b23ec9c04386f9a02c76 146273d1c716700bb25aaa15e8595624b611ffdf 74867c5a2cf408b090752d3cb8767bb46fdb4a0529bc959d96f51aeb2607d7e3 Loading...

HTTP Transactions (43)

URL IP Response Size

diyiapp.cm/

143.92.58.241

301 Moved Permanently

162 B

URL User Request GET HTTP/1.1
diyiapp.cm/
IP
143.92.58.241:80
ASN
#64050 BGPNET Global ASN

File type
HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size
162 B (162 bytes)
Hash
4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake Lottery

HTTP Headers

GET / HTTP/1.1
Host: diyiapp.cm
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Wed, 01 Nov 2023 05:36:48 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://5222co.com/register?id=63494009
Strict-Transport-Security: max-age=31536000

ocsp.sectigo.com/

172.64.149.23

472 B

URL
ocsp.sectigo.com/
IP
172.64.149.23:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
472 B (472 bytes)
Hash
7a1f0c1d7e0d0fc9cddde53fb615b76d
7da02bc68025af812eabd223d096a4260d0019ec
c0fe552ec019cbde0266c9d5e8a918b40fabb941c42565522e7c0de357cc7a00

HTTP Headers

POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 Nov 2023 05:36:50 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 31 Oct 2023 05:35:56 GMT
Expires: Tue, 07 Nov 2023 05:35:55 GMT
Etag: "7da02bc68025af812eabd223d096a4260d0019ec"
Cache-Control: max-age=517744,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 81f1c8473f0456ca-OSL

5222co.com/favicon.ico

20.239.95.19

200 OK

17 kB

URL GET HTTP/2
5222co.com/favicon.ico
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
MS Windows icon resource - 1 icon, 64x64, 32 bits/pixel\012- data
Size
17 kB (16958 bytes)
Hash
c476d836b65890ea612b13942ce29370
3a0897475859ba6b87ea8c4f0ef9d95b6eb349d4
96c0d5bb98d6d1e935c75b1f82a97732f4f5e57c1133b08814ee1a0e58b6f5ac

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: image/x-icon
content-length: 16958
X-Firefox-Spdy: h2

5222co.com/static/js/7.8a722cde59c75e6b4346.js

20.239.95.19

200 OK

114 kB

URL GET HTTP/2
5222co.com/static/js/7.8a722cde59c75e6b4346.js
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (64440), with no line terminators
Size
114 kB (113678 bytes)
Hash
2ff902ab2d755f6b8fda17d8168b66d8
5e25dbb49f690b5023336bafbf179f59ff6dec08
1288e4c76f6f18d36dd0046b8422b82789b59a43f0b64f1349a5be2827b41845

HTTP Headers

GET /static/js/7.8a722cde59c75e6b4346.js HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-4ca81"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/js/yidun/index.js

20.239.95.19

200 OK

406 kB

URL GET HTTP/2
5222co.com/static/js/yidun/index.js
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
gzip compressed data, from Unix\012- data
Size
406 kB (405678 bytes)
Hash
50502f8eefc1086dac6530461ffd8b8c
e1b720dcc886c92f23987aa1a98c6b724c32b982
82a955315d2f3e1f52abab3da5f450324170ceebd154746785b6ab228b4ba7b4

HTTP Headers

GET /static/js/yidun/index.js HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-2a81"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/df-data/pro-management/101cp/1681388761282.png?776368

20.239.95.19

200 OK

11 kB

URL GET HTTP/2
5222co.com/df-data/pro-management/101cp/1681388761282.png?776368
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
PNG image data, 200 x 50, 8-bit/color RGBA, non-interlaced\012- data
Size
11 kB (11369 bytes)
Hash
3604096e62862d9e2b02e4f369cbfda1
4cd60665d5720670af7c5491a684b9d2f0322cb8
d54f83b68398a3afa26492528a548c954d84ad1504a28a25915e8528870bcee6

HTTP Headers

GET /df-data/pro-management/101cp/1681388761282.png?776368 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:53 GMT
content-type: application/octet-stream
content-length: 11369
last-modified: Thu, 13 Apr 2023 12:21:50 GMT
etag: "3604096e62862d9e2b02e4f369cbfda1"
x-amz-request-id: tx0000000000000016d7a16-006541d7fb-630c-default
x-cache: HIT
cache-control: private, max-age=86400
accept-ranges: bytes
X-Firefox-Spdy: h2

aeis.alicdn.com/AWSC/uab/1.140.0/collina.js

104.110.21.4

200 OK

120 kB

URL GET HTTP/2
aeis.alicdn.com/AWSC/uab/1.140.0/collina.js
IP
104.110.21.4:443
ASN
#16625 AKAMAI-AS

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerDigiCert Inc
Subjectru.aliexpress.com
FingerprintB1:91:B1:0B:E8:08:EE:A0:A9:49:20:4F:0B:A7:3D:7C:98:86:7C:9D
ValiditySat, 21 Oct 2023 00:00:00 GMT - Wed, 23 Oct 2024 23:59:59 GMT

File type
data
Size
120 kB (119486 bytes)
Hash
75fb6b94dcb3a9c89abb59a3ffd7546f
96101820857ef511ba83017e928aeeb88353b162
04975704505b42dc124568d9d4be26aee2d4592826a0487920cb1d016d1a8e58

HTTP Headers

GET /AWSC/uab/1.140.0/collina.js HTTP/1.1
Host: aeis.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 119486
x-oss-request-id: 64FB15FDEFCB233135433E89
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 17940526130122019226
x-oss-storage-class: Standard
content-md5: dftrlNyzqciau1mj/9dUbw==
x-oss-server-time: 5
x-source-scheme: https
content-encoding: gzip
ali-swift-global-savetime: 1694176765
x-swift-savetime: Fri, 08 Sep 2023 20:27:00 GMT
x-swift-cachetime: 58345
eagleid: 2ff6309b16942048205346532e
served-from: 2.21.243.214
cache-control: max-age=284565, s-maxage=86400
expires: Sat, 04 Nov 2023 12:39:38 GMT
date: Wed, 01 Nov 2023 05:36:53 GMT
vary: Accept-Encoding
network_info: NO_OSLO_50304
timing-allow-origin: *, *
access-control-allow-origin: *
access-control-expose-headers: FW_IP
fw_ip: 104.110.21.4
X-Firefox-Spdy: h2

5222co.com/v1/report/tenantReport/getAvgOptTime?t=1698817014096

20.239.95.19

200 OK

77 kB

URL GET HTTP/2
5222co.com/v1/report/tenantReport/getAvgOptTime?t=1698817014096
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
JSON data\012- , Unicode text, UTF-8 text, with very long lines (65528), with no line terminators
Size
77 kB (77334 bytes)
Hash
31cb65acf2dcde45a40df814e80b5cf0
f09ab2b6105c5043fa966c74a1169a29259b3ce7
b6a29c9e0cbeb015075c93cd3135e77b6616480bac2963d6ed26e46731bde1a9

HTTP Headers

GET /v1/report/tenantReport/getAvgOptTime?t=1698817014096 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/11/01_10:58:09 pc-v1.202.0
X-Token: 
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/js/0.25dc413ba0e1ab4cd12b.js

20.239.95.19

200 OK

238 kB

URL GET HTTP/2
5222co.com/static/js/0.25dc413ba0e1ab4cd12b.js
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
gzip compressed data, from Unix\012- data
Size
238 kB (237987 bytes)
Hash
056f4a98725c404d3fdd170a6e7b7857
b98e76b700cd4a02f81bd7b99c7a16bf5b4f7879
88f7dfdebe25d128918c291c1dba3ce32a00b42638703d21f0f8e0e20bb88900

HTTP Headers

GET /static/js/0.25dc413ba0e1ab4cd12b.js HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-accb4"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/v1/management/tenant/getTenantConfig?t=1698817013826

20.239.95.19

200 OK

831 B

URL GET HTTP/2
5222co.com/v1/management/tenant/getTenantConfig?t=1698817013826
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
gzip compressed data, from Unix\012- data
Size
831 B (831 bytes)
Hash
bdf2d9759aa645ade741e0cd23b98430
7fc98ec1e191f19604bd173728a736a1b1dbe0be
15ff566233d133a472ff4aaac563b4ea9e3a10411dc52af0e7491e4ef29ccf39

HTTP Headers

GET /v1/management/tenant/getTenantConfig?t=1698817013826 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/11/01_10:58:09 pc-v1.202.0
X-Token: 
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
X-Firefox-Spdy: h2

ocsp2.globalsign.com/gsorganizationvalsha2g3

104.18.21.226

1.5 kB

URL
ocsp2.globalsign.com/gsorganizationvalsha2g3
IP
104.18.21.226:0
ASN
#13335 CLOUDFLARENET

File type
data
Size
1.5 kB (1461 bytes)
Hash
21021185fe94dbf53c9c54a99cc4e8ca
8104221ccc782c9b8db4c2ad11288f3abf2fdb5f
4c45720ccbac23f6e40046d60e3e62c010e2e8a68fd175ded61c13f1d613a089

HTTP Headers

POST /gsorganizationvalsha2g3 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 01 Nov 2023 05:36:55 GMT
Content-Type: application/ocsp-response
Content-Length: 1461
Connection: keep-alive
Expires: Sun, 05 Nov 2023 02:08:07 GMT
ETag: "8104221ccc782c9b8db4c2ad11288f3abf2fdb5f"
Last-Modified: Wed, 01 Nov 2023 02:08:08 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 863
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 81f1c86939ec568f-OSL

5222co.com/v1/management/tenant/getTenantConfig?t=1698817014062

20.239.95.19

200 OK

21 kB

URL GET HTTP/2
5222co.com/v1/management/tenant/getTenantConfig?t=1698817014062
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
gzip compressed data, from Unix\012- data
Size
21 kB (21160 bytes)
Hash
0b2a35790e3854e56b8fd07c517f7f70
77232ef00fa49f21a34c2aee847ae29f24941bf0
e90b8580709a599257a12b567b802d64b5fe7a580f917ba1dd5ada31fc4fd432

HTTP Headers

GET /v1/management/tenant/getTenantConfig?t=1698817014062 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/11/01_10:58:09 pc-v1.202.0
X-Token: 
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
X-Firefox-Spdy: h2

ynuf.aliapp.org/service/um.json

203.119.169.158

200 OK

136 B

URL POST HTTP/2
ynuf.aliapp.org/service/um.json
IP
203.119.169.158:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerGlobalSign nv-sa
Subject*.alibabacorp.com
Fingerprint21:4B:26:A9:58:52:03:EC:07:38:66:00:3B:39:33:F3:9B:56:E7:16
ValidityWed, 12 Apr 2023 23:17:04 GMT - Mon, 13 May 2024 23:11:02 GMT

File type
JSON data\012- , ASCII text, with no line terminators
Size
136 B (136 bytes)
Hash
e2b67de4944e1072a32fc0227be3dfc5
8cfb94f849e43b5a887797c2ccc486b329ea6c57
fde3362722d8d2dd95e3ff67626c25dd7771093aef9bca358f59cf6796770fc9

HTTP Headers

POST /service/um.json HTTP/1.1
Host: ynuf.aliapp.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 637
Origin: https://5222co.com
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/2 200 OK
date: Wed, 01 Nov 2023 05:36:56 GMT
content-type: text/plain;charset=UTF-8
content-length: 136
x-application-context: umid-web:cn-prod:7001
access-control-allow-origin: https://5222co.com
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Accept,X-PINGARUNER,CONTENT-TYPE,X-Requested-With
set-cookie: umdata_=G59810A1E11B44521D6BA2FF63D8A7278B78B623E6DC2991278; Max-Age=31536000; Expires=Thu, 31-Oct-2024 05:36:56 GMT; Domain=ynuf.aliapp.org; Path=/
p3p: CP=IVAa PSAa
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
server: Tengine/Aserver
eagleeye-traceid: 213e20ab16988170166641809eaa28
timing-allow-origin: *
X-Firefox-Spdy: h2

5222co.com/static/js/manifest.8eadc6b45795b3a3e588.js

20.239.95.19

200 OK

7.2 kB

URL GET HTTP/2
5222co.com/static/js/manifest.8eadc6b45795b3a3e588.js
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (7596), with no line terminators
Size
7.2 kB (7170 bytes)
Hash
fdaf7bb5cbc327311e329064f058cd54
36cca9e1f18c6acea8d9f8e5c01ec78c8a083f0b
c17a6c14080559812437f25e492af7f97501e83995bf0860dec6ba2ce97dd3ab

HTTP Headers

GET /static/js/manifest.8eadc6b45795b3a3e588.js HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-1c02"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/v1/management/tenant/getTenantConfig?t=1698817013816

20.239.95.19

200 OK

1.7 kB

URL GET HTTP/2
5222co.com/v1/management/tenant/getTenantConfig?t=1698817013816
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (1892), with no line terminators
Size
1.7 kB (1670 bytes)
Hash
1576766b3a49baed0c9d8aef18d64b0b
81f5e942c0478d53bcdbe72f86d5f38a51aa1960
f68d5fab7a709516f860831a1e6bc90d4a065643e94f7c58dd37c6f165c86336

HTTP Headers

GET /v1/management/tenant/getTenantConfig?t=1698817013816 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/11/01_10:58:09 pc-v1.202.0
X-Token: 
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
X-Firefox-Spdy: h2

cf.aliyun.com/nocaptcha/initialize.jsonp?a=FFFF0N0000000000B773&t=FFFF0N0000000000B773%3A1698817014457%3A0.41981164032089036&scene=nc_login&lang=cn&v=v1.2.18&href=https%3A%2F%2F5222co.com%2Fregister&comm={}&callback=initializeJsonp_033761510395864025

59.82.133.163

200 OK

95 B

URL GET HTTP/1.1
cf.aliyun.com/nocaptcha/initialize.jsonp?a=FFFF0N0000000000B773&t=FFFF0N0000000000B773%3A1698817014457%3A0.41981164032089036&scene=nc_login&lang=cn&v=v1.2.18&href=https%3A%2F%2F5222co.com%2Fregister&comm={}&callback=initializeJsonp_033761510395864025
IP
59.82.133.163:443
ASN
#0

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerGlobalSign nv-sa
Subjectcf.aliyun.com
Fingerprint6D:EC:9B:A6:DD:FA:A0:BD:B4:6C:57:9B:3E:71:63:3F:18:4E:45:37
ValidityThu, 12 Oct 2023 08:39:03 GMT - Sat, 18 May 2024 15:52:00 GMT

File type
ASCII text, with no line terminators
Size
95 B (95 bytes)
Hash
9c31baa7dbd6bcbe84ecd834cad8879d
cbb21447f842e552699cd0b2d1b416dc0e2acce6
acef3dfc78f3b2421281490e53a317ce74d4ab80dc00d25c3cd3c7b4cc378161

HTTP Headers

GET /nocaptcha/initialize.jsonp?a=FFFF0N0000000000B773&t=FFFF0N0000000000B773%3A1698817014457%3A0.41981164032089036&scene=nc_login&lang=cn&v=v1.2.18&href=https%3A%2F%2F5222co.com%2Fregister&comm={}&callback=initializeJsonp_033761510395864025 HTTP/1.1
Host: cf.aliyun.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Date: Wed, 01 Nov 2023 05:36:54 GMT
Content-Type: text/javascript;charset=UTF-8
Content-Length: 95
Connection: close
Content-Language: zh-CN

ynuf.aliapp.org/w/wu.json

203.119.169.158

200 OK

156 B

URL GET HTTP/2
ynuf.aliapp.org/w/wu.json
IP
203.119.169.158:443
ASN
#37963 Hangzhou Alibaba Advertising Co.,Ltd.

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerGlobalSign nv-sa
Subject*.alibabacorp.com
Fingerprint21:4B:26:A9:58:52:03:EC:07:38:66:00:3B:39:33:F3:9B:56:E7:16
ValidityWed, 12 Apr 2023 23:17:04 GMT - Mon, 13 May 2024 23:11:02 GMT

File type
ASCII text, with no line terminators
Size
156 B (156 bytes)
Hash
a803b15e30be80f449b02c252da8a8f1
2e93a0f669bd146ad6a898dd0b8a216b968c1818
abebd07fe994672e90c8921eba9172d49f6932a80c490ce7485949a9dd3c06c2

HTTP Headers

GET /w/wu.json HTTP/1.1
Host: ynuf.aliapp.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 01 Nov 2023 05:36:55 GMT
content-type: text/javascript;charset=utf-8
content-length: 156
x-application-context: umid-web:cn-prod:7001
access-control-allow-methods: GET,POST,OPTIONS
access-control-allow-credentials: true
access-control-allow-headers: Accept,X-PINGARUNER,CONTENT-TYPE,X-Requested-With
etag: G4F064C5C3C6B26E82D9FDCAEAFC04465D8FB434F5C85001716
cache-control: no-cache
set-cookie: cbc=G980E8F4B8237D5B40654216B905A87E5F724101E2BC6ECC0CF; Max-Age=31536000; Expires=Thu, 31-Oct-2024 05:36:55 GMT; Domain=ynuf.aliapp.org; Path=/
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000 ; includeSubDomains
server: Tengine/Aserver
eagleeye-traceid: 213e20ab16988170155611737eaa28
timing-allow-origin: *
X-Firefox-Spdy: h2

5222co.com/static/css/21.a871bd912676.css

20.239.95.19

200 OK

75 kB

URL GET HTTP/2
5222co.com/static/css/21.a871bd912676.css
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type

Size
75 kB (74787 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/css/21.a871bd912676.css HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:53 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-12423"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/src/img/favicon.267ace1.png

20.239.95.19

200 OK

4.0 kB

URL GET HTTP/2
5222co.com/src/img/favicon.267ace1.png
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4095), with no line terminators
Size
4.0 kB (4029 bytes)
Hash
5b28071ab8d9db539d3aab850eb93657
a5b2ca9c2028213b5de9e2dee055015afd7981bf
6e6c9d45f68239f9ca4eb0c1e497385285cc11d0f78410e0acec55ec4ec99c76

HTTP Headers

GET /src/img/favicon.267ace1.png HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: text/html
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-fbd"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/js/10.da526d8951ec3b4b51e4.js

20.239.95.19

200 OK

21 kB

URL GET HTTP/2
5222co.com/static/js/10.da526d8951ec3b4b51e4.js
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type

Size
21 kB (20652 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/js/10.da526d8951ec3b4b51e4.js HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:53 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-50ac"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/v1/management/content/getIntroductionList?t=1698817014092

20.239.95.19

200 OK

815 B

URL GET HTTP/2
5222co.com/v1/management/content/getIntroductionList?t=1698817014092
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (907), with no line terminators
Size
815 B (815 bytes)
Hash
e3130cf930bef2be718eea63cdfb6973
32f205c578cfff341866c7c7a69f141fa33b87f2
8b99741e5d2e65e436a0a312bceebf94c7fae9f6882cca003ba7aad7c2eeead7

HTTP Headers

GET /v1/management/content/getIntroductionList?t=1698817014092 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/11/01_10:58:09 pc-v1.202.0
X-Token: 
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/css/vendor.1349cfbdede1.css

20.239.95.19

200 OK

100 kB

URL GET HTTP/2
5222co.com/static/css/vendor.1349cfbdede1.css
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
100 kB (100119 bytes)
Hash
1d0e95a810739c5556f1391cb08b9693
919987b5b7b5f2764f0cd8e32295d663b00b9fb8
bc5e61acb2cbf97ca4759cffbf8a7f04549e445b3e8e08db1559ac5201c82eee

HTTP Headers

GET /static/css/vendor.1349cfbdede1.css HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-18717"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/df-data/game/1578637842482.png

20.239.95.19

200 OK

371 kB

URL GET HTTP/2
5222co.com/df-data/game/1578637842482.png
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
PNG image data, 2990 x 566, 8-bit colormap, non-interlaced\012- data
Size
371 kB (371131 bytes)
Hash
a366792ce69457744b882318850cefe2
5b078849d41e40f9d2c6dba6b821a04a9c0c35b9
faa00bbd3a46b12e4205da06089f1f4d489f01ab874caee4cd5d6c9c37203842

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake Lottery

HTTP Headers

GET /df-data/game/1578637842482.png HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:53 GMT
content-type: image/png
last-modified: Mon, 27 Jan 2020 07:29:14 GMT
etag: W/"0819879e3d4d51:0"
x-powered-by: ASP.NET
access-control-allow-headers: X-Requested-With
access-control-allow-methods: GET,POST,OPTIONS
cache-control: max-age=86400
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/v1/betting/getServerTimeMillisecond?t=1698817013840

20.239.95.19

200 OK

58 B

URL GET HTTP/2
5222co.com/v1/betting/getServerTimeMillisecond?t=1698817013840
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with no line terminators
Size
58 B (58 bytes)
Hash
7ad5b5126f9f94f2ec7774590a6a6411
46972bff6646d0d6b3adf8b4d1d824aadb38299e
076ce2eecc932fb2ca049e9abb7a19ccf7d4d27b13bc8d3ecf3aa0e685972f91

HTTP Headers

GET /v1/betting/getServerTimeMillisecond?t=1698817013840 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/11/01_10:58:09 pc-v1.202.0
X-Token: 
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/fonts/iconfont.7a93517.woff2

20.239.95.19

200 OK

30 kB

URL GET HTTP/2
5222co.com/static/fonts/iconfont.7a93517.woff2
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
Web Open Font Format (Version 2), TrueType, length 30328, version 1.0\012- data
Size
30 kB (30328 bytes)
Hash
7a93517d8878a63ffa678a64a9c48ea3
b106d61bb1a6a2c8d49e53c41d5eef6d4fec6b1b
5c24c7a1eb9617d299870fb7ecfa5eb08fb36be3b6c9836e697598dd01fc243f

HTTP Headers

GET /static/fonts/iconfont.7a93517.woff2 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/static/css/app.6afd4eea0298.css
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:53 GMT
content-type: font/woff2
content-length: 30328
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: "6541bedf-7678"
accept-ranges: bytes
X-Firefox-Spdy: h2

5222co.com/v1/users/announcement/content?t=1698817014471&id=138401

20.239.95.19

200 OK

1.4 kB

URL GET HTTP/2
5222co.com/v1/users/announcement/content?t=1698817014471&id=138401
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (1172), with no line terminators
Size
1.4 kB (1352 bytes)
Hash
393d42f7917449d237ab6036a23ab4d4
7c649f3a5f65d8b57cbea0e6a5e728790a99a825
46d95e1ad72177c1c076575d030627a63ead310eb9af511e8a2dc7b6e64b7094

HTTP Headers

GET /v1/users/announcement/content?t=1698817014471&id=138401 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/11/01_10:58:09 pc-v1.202.0
X-Token: 
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/register?id=63494009

20.239.95.19

200 OK

4.0 kB

URL User Request GET HTTP/2
5222co.com/register?id=63494009
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4095), with no line terminators
Size
4.0 kB (4029 bytes)
Hash
5b28071ab8d9db539d3aab850eb93657
a5b2ca9c2028213b5de9e2dee055015afd7981bf
6e6c9d45f68239f9ca4eb0c1e497385285cc11d0f78410e0acec55ec4ec99c76

HTTP Headers

GET /register?id=63494009 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:50 GMT
content-type: text/html
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-fbd"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/v1/management/tenant/getSpeedDomain

20.239.95.19

200 OK

134 B

URL GET HTTP/2
5222co.com/v1/management/tenant/getSpeedDomain
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with no line terminators
Size
134 B (134 bytes)
Hash
aae0628b62a663847f3053f6c1d2c970
6f496ffa76b243d2566c6162b3978f89359b06ea
acf10e67896a955e04c75609c817bc4c355a730a93a35634774be3b5d4eff038

HTTP Headers

GET /v1/management/tenant/getSpeedDomain HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Token: 
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/public/layer.m.js

20.239.95.19

200 OK

3.1 kB

URL GET HTTP/2
5222co.com/static/public/layer.m.js
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (3208), with no line terminators
Size
3.1 kB (3096 bytes)
Hash
38b405624adacadff4fd9955b0248871
11747a1c224e318ad5c0ff75b1a834c362ff471b
7c394e10425cccb4266d17a22fc5e5e783020d64c0c0c1824c283ca7a12969a8

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake Lottery

HTTP Headers

GET /static/public/layer.m.js HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-c18"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/js/aliyun.min.js

20.239.95.19

200 OK

220 kB

URL GET HTTP/2
5222co.com/static/js/aliyun.min.js
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (32085)
Size
220 kB (219487 bytes)
Hash
85e7d42d7ec09184b9bbde78b641ca00
0bc92965c772b460ea1a65468fb2e8baabc7b5d0
5c919aeed13a145644e93be09a3ce46b4e2f241133ac316d61f8c5d2dc59758c

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake Lottery

HTTP Headers

GET /static/js/aliyun.min.js HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-3595f"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/v1/users/announcement/list?t=1698817014094&pageSize=20&pageNum=1

20.239.95.19

200 OK

997 B

URL GET HTTP/2
5222co.com/v1/users/announcement/list?t=1698817014094&pageSize=20&pageNum=1
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with very long lines (1061), with no line terminators
Size
997 B (997 bytes)
Hash
e146e1cf9315ae1bc431f7d3abec2cfb
568c818446d8b18c03d6e966d175be5e276163a9
02344e8e4ac14f49572831c626f9c01e2caf2c739efea3658551d0efa7c4b814

HTTP Headers

GET /v1/users/announcement/list?t=1698817014094&pageSize=20&pageNum=1 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/11/01_10:58:09 pc-v1.202.0
X-Token: 
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/js/21.89ac0bd35be932dfed91.js

20.239.95.19

200 OK

59 kB

URL GET HTTP/2
5222co.com/static/js/21.89ac0bd35be932dfed91.js
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type

Size
59 kB (58909 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/js/21.89ac0bd35be932dfed91.js HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:53 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-e61d"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/df-data/system/common/other/rechargepc_new.png

20.239.95.19

200 OK

20 kB

URL GET HTTP/2
5222co.com/df-data/system/common/other/rechargepc_new.png
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
PNG image data, 454 x 70, 8-bit/color RGBA, non-interlaced\012- data
Size
20 kB (20245 bytes)
Hash
6c82a37175b64beb0708e9a24127ade7
fab9962d29e400f374b4603c962caf3c2f4a21a3
f6a4e82fad9986b1d357d8adaec4757edb3b3a339ef9d2df42cb46640f721c46

HTTP Headers

GET /df-data/system/common/other/rechargepc_new.png HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/static/css/21.a871bd912676.css
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:53 GMT
content-type: image/png
last-modified: Fri, 13 Oct 2023 03:42:40 GMT
etag: W/"0f8ab5087fdd91:0"
x-powered-by: ASP.NET
access-control-allow-headers: X-Requested-With
access-control-allow-methods: GET,POST,OPTIONS
cache-control: max-age=86400
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

aeis.alicdn.com/AWSC/AWSC/awsc.js?_t=235946

104.110.21.4

200 OK

9.7 kB

URL GET HTTP/2
aeis.alicdn.com/AWSC/AWSC/awsc.js?_t=235946
IP
104.110.21.4:443
ASN
#16625 AKAMAI-AS

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerDigiCert Inc
Subjectru.aliexpress.com
FingerprintB1:91:B1:0B:E8:08:EE:A0:A9:49:20:4F:0B:A7:3D:7C:98:86:7C:9D
ValiditySat, 21 Oct 2023 00:00:00 GMT - Wed, 23 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (10191), with no line terminators
Size
9.7 kB (9742 bytes)
Hash
f3158b5c436660be58c89e049d0a3b10
c0673fa8f4d724876da96ab262dfe54aded9be3e
42556cb57c1a915ed1fab7f3bb06064920dfef8c504c154f068ebbc2e823b217

HTTP Headers

GET /AWSC/AWSC/awsc.js?_t=235946 HTTP/1.1
Host: aeis.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 3667
x-oss-request-id: 6541D996A4A3FB3636B91DDA
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 4965608046239515837
x-oss-storage-class: Standard
content-md5: CQlX8vFKrg9TJNSDSuTFmg==
x-oss-server-time: 1
x-source-scheme: https
content-encoding: gzip
ali-swift-global-savetime: 1698814358
x-swift-savetime: Wed, 01 Nov 2023 04:52:38 GMT
x-swift-cachetime: 3600
eagleid: 2ff62c9816988143585437669e
cache-control: max-age=4498, s-maxage=3600
expires: Wed, 01 Nov 2023 06:51:51 GMT
date: Wed, 01 Nov 2023 05:36:53 GMT
vary: Accept-Encoding
served-from: 23.36.77.199
network_info: NO_OSLO_50304
timing-allow-origin: *, *
access-control-allow-origin: *
access-control-expose-headers: FW_IP
fw_ip: 104.110.21.4
X-Firefox-Spdy: h2

5222co.com/static/public/need/layer.css

20.239.95.19

200 OK

3.7 kB

URL GET HTTP/2
5222co.com/static/public/need/layer.css
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
Unicode text, UTF-8 text, with very long lines (3701), with no line terminators
Size
3.7 kB (3667 bytes)
Hash
42f69c087e51045a8a3c7cd673035bac
e8f0e6c08d06438f21a4293f4824615adf1b739d
56f78048287d433001c7733ad944f0a4ef94f3a06e8f8958a7ddf86644c8ec44

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake Lottery

HTTP Headers

GET /static/public/need/layer.css HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-e53"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/css/app.6afd4eea0298.css

20.239.95.19

200 OK

165 kB

URL GET HTTP/2
5222co.com/static/css/app.6afd4eea0298.css
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type

Size
165 kB (165129 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /static/css/app.6afd4eea0298.css HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-28509"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/css/10.c5aa08e8adb9.css

20.239.95.19

200 OK

1.1 kB

URL GET HTTP/2
5222co.com/static/css/10.c5aa08e8adb9.css
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
ASCII text, with very long lines (1099), with no line terminators
Size
1.1 kB (1093 bytes)
Hash
b9d1a69e6c40ebff083d8bdddecbc363
8bae8edee00b86532d71191e79c080762f849695
36e91d2c7da3be4ace2d4015c93384b8e51225048821ea7164ffdbb7da110b75

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake Lottery

HTTP Headers

GET /static/css/10.c5aa08e8adb9.css HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:53 GMT
content-type: text/css
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-445"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/v1/users/getAliyunAppKey?t=1698817014096

20.239.95.19

200 OK

61 B

URL GET HTTP/2
5222co.com/v1/users/getAliyunAppKey?t=1698817014096
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with no line terminators
Size
61 B (61 bytes)
Hash
8410d568f5f7b51f12ffb968a3a1fc00
fc7f48762118f36893c8cafc30ddb6ef23d20b12
1c8ff4519d56ff4664ad987f2e459cb0b3b6a8716319b4d6c66ab322c7ad4a23

HTTP Headers

GET /v1/users/getAliyunAppKey?t=1698817014096 HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/11/01_10:58:09 pc-v1.202.0
X-Token: 
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/json;charset=UTF-8
access-control-allow-credentials: true
access-control-allow-origin: *
access-control-allow-headers: X-Token,Content-Type,Publish-Version
access-control-allow-methods: POST,GET,OPTIONS
access-control-max-age: 604800
access-control-expose-headers: X-forwared-port, X-forwarded-host,X-Token,Content-Type,Publish-Version
vary: Origin,Access-Control-Request-Method,Access-Control-Request-Headers
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/df-data/system/pc/login/loginBg.png

20.239.95.19

200 OK

20 kB

URL GET HTTP/2
5222co.com/df-data/system/pc/login/loginBg.png
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
PNG image data, 312 x 234, 8-bit/color RGBA, non-interlaced\012- data
Size
20 kB (20140 bytes)
Hash
f14a9c8be2d83922e4ae691801825839
7198fc446609a5aea6e916a81c0895f1fc6c6f85
1a020a93ee5dbf562e6ad700e33935e156d1705d1cc42b6574dca17b1ec36e43

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake Lottery

HTTP Headers

GET /df-data/system/pc/login/loginBg.png HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/static/css/21.a871bd912676.css
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:53 GMT
content-type: image/png
last-modified: Tue, 18 Oct 2016 16:57:42 GMT
etag: W/"0477fbd6029d21:0"
x-powered-by: ASP.NET
access-control-allow-headers: X-Requested-With
access-control-allow-methods: GET,POST,OPTIONS
cache-control: max-age=86400
x-cache: HIT
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/js/initws.js

20.239.95.19

200 OK

9.0 kB

URL GET HTTP/2
5222co.com/static/js/initws.js
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
C source, Unicode text, UTF-8 text, with very long lines (9159), with no line terminators
Size
9.0 kB (9034 bytes)
Hash
0c8fa7ab7e2c67d69a0851fa58cc7e2d
a0acfa0223b285e7120221ac157129920f350d33
3f5cf63478c72da23b68641226e92013cc9228d3ca2d4f6e8eca82d0c70d5ace

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake Lottery

HTTP Headers

GET /static/js/initws.js HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-234a"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/static/spine-webgl.js

20.239.95.19

200 OK

369 kB

URL GET HTTP/2
5222co.com/static/spine-webgl.js
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
ASCII text
Size
369 kB (368805 bytes)
Hash
5200130e3b8970af6c19b8587f46663b
56f9307ce28cb0a1c0150d92b095760936e83618
ffafc28590239f5f3f134c8bc83753f6c2e5d4ff2d3c775c2ff50afc2a608c13

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake Lottery

HTTP Headers

GET /static/spine-webgl.js HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:51 GMT
content-type: application/javascript
last-modified: Wed, 01 Nov 2023 02:58:39 GMT
etag: W/"6541bedf-5a0a5"
content-encoding: gzip
X-Firefox-Spdy: h2

5222co.com/v1/statistics/push

20.239.95.19

200 OK

43 B

URL POST HTTP/2
5222co.com/v1/statistics/push
IP
20.239.95.19:443
ASN
#8075 MICROSOFT-CORP-MSN-AS-BLOCK

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerSectigo Limited
Subject101cp11.com
Fingerprint79:7A:8A:B4:E4:FA:A6:95:96:E0:BF:13:DB:0C:4D:CC:E9:44:11:B9
ValidityFri, 29 Sep 2023 00:00:00 GMT - Mon, 15 Apr 2024 23:59:59 GMT

File type
troff or preprocessor input, Unicode text, UTF-8 text, with no line terminators
Size
43 B (43 bytes)
Hash
88f5d81d282db05ba087420dd56bcfc7
4e8326cb4f2e39bfb2ef07a64b11e6c817cd4dda
f77cddfc101160c163bc59fc27fb3ab62cd46f9907d28f795a79e7920a06c400

Detections

Analyzer	Verdict	Alert
urlquery	scam	Scam - Fake Lottery

HTTP Headers

POST /v1/statistics/push HTTP/1.1
Host: 5222co.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Publish-Version: 2023/11/01_10:58:09 pc-v1.202.0
Content-Type: application/x-www-form-urlencoded;charset=UTF-8
X-Token: 
Content-Length: 180
Origin: https://5222co.com
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/register?id=63494009
Cookie: _uab_collina=169881701324214886653932
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: openresty/1.21.4.1
date: Wed, 01 Nov 2023 05:36:53 GMT
content-type: application/json;charset=UTF-8
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2

aeis.alicdn.com/AWSC/WebUMID/1.93.0/um.js

104.110.21.4

200 OK

178 kB

URL GET HTTP/2
aeis.alicdn.com/AWSC/WebUMID/1.93.0/um.js
IP
104.110.21.4:443
ASN
#16625 AKAMAI-AS

Requested by
https://5222co.com/register?id=63494009
Certificate
IssuerDigiCert Inc
Subjectru.aliexpress.com
FingerprintB1:91:B1:0B:E8:08:EE:A0:A9:49:20:4F:0B:A7:3D:7C:98:86:7C:9D
ValiditySat, 21 Oct 2023 00:00:00 GMT - Wed, 23 Oct 2024 23:59:59 GMT

File type
ASCII text, with very long lines (65536), with no line terminators
Size
178 kB (177654 bytes)
Hash
a4cff78229e56fde5f28d1999679a1d1
8d8f89aa7d26569337192dce8a12daaa1867bcd4
4c4701ca975df0019b9ce5ffd2a8d33f413bad55663a9f64ba9369da7a444db0

HTTP Headers

GET /AWSC/WebUMID/1.93.0/um.js HTTP/1.1
Host: aeis.alicdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://5222co.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: Tengine
content-type: application/javascript
content-length: 77252
x-oss-request-id: 652FFEA31D33C13538E6D398
x-oss-object-type: Normal
x-oss-hash-crc64ecma: 2332966527039349753
x-oss-storage-class: Standard
content-md5: pM/3ginlb95fKNGZlnmh0Q==
x-oss-server-time: 4
x-source-scheme: https
content-encoding: gzip
ali-swift-global-savetime: 1697644196
x-swift-savetime: Thu, 19 Oct 2023 01:47:03 GMT
x-swift-cachetime: 50573
eagleid: 2ff6309816976800451084135e
served-from: 2.21.243.8
cache-control: max-age=1419124, s-maxage=86400
expires: Fri, 17 Nov 2023 15:48:57 GMT
date: Wed, 01 Nov 2023 05:36:53 GMT
vary: Accept-Encoding
network_info: NO_OSLO_50304
timing-allow-origin: *, *
access-control-allow-origin: *
access-control-expose-headers: FW_IP
fw_ip: 104.110.21.4
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (22)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash